IT Support & Managed IT Services in Phoenix, AZ

Case study: finding the email behind a compromised account

When a staff account at a Phoenix organization signed in from across the country, our security toolset, which includes Huntress managed detection and response, flagged it and isolated the account. We reset the password, ended every session, and got on the phone with the user to set up multi-factor authentication on her new phone and get her back into her apps.

Then we asked what had come in that day. A vendor email with a malicious link was the likely source, so we reported it as phishing. Resetting a password closes the door once. Finding how someone got in is what helps keep it closed.

What Switching to AIM Looks Like

Our Phoenix team runs onboarding in five phases, and each one has a clear finish line.

1. Setup before day one. We build your company's place in our ticketing, documentation, monitoring, and security systems, so the technician who arrives has somewhere to record what they find.
2. Backups. We set up hourly backups and count them done only after the first full backup completes and is checked.
3. Documentation handoff. We collect what your previous provider and staff have, then confirm each login and system ourselves, and write down what nobody could tell us.
4. First day on site. We remove the old provider's software, install our monitoring and security on each computer, and match the machines we find against your user list.
5. The weeks after. We close out the previous provider's access, send your staff a welcome email that explains how to reach support, and review your Microsoft 365 and email security settings.

What we'll need from you: Someone with Global Admin rights to your Microsoft 365 needs to approve our partner access. We ask for it on day one, because much of the security and backup setup waits on it.